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Abstract 

The paper gives a soundness and completeness proof for the implicative frag¬ 
ment of intuitionistic calculus with respect to the semantics of computability 
logic, which understands intuitionistic implication as interactive algorithmic re¬ 
duction. This concept — more precisely, the associated concept of reducibility — 
is a generalization of Turing reducibility from the traditional, input/output sorts 
of problems to computational tasks of arbitrary degrees of interactivity. 
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1 Introduction 

A quest for a convincing semantical explication of the constructivistic philosophy of 
intuitionistic logic has been on for many decades. Among the most notable but 
unsuccessful attempts in this direction are Kleene’s realizability [12], Godel’s Dialectica 
interpretation [5] and Medvedev’s finite-problem semantics [16], directly or indirectly 
stimulated by Kolmogorov’s [14] well known yet rather abstract thesis, according to 
which intuitionistic logic is a logic of problems. A series of semantics in this style, while 
meaningful and close in spirit to Kolmogorov’s vision, turned out to yield inherent in¬ 
completeness. Blass’s appealing game semantics [1] which, by the way, happens to be 
the nearest precursor of the semantics dealt with in the present paper, * 1 should also 
be listed here. While the propositional fragment of intuitionistic logic was proven to 
be sound with respect to it, the questions on predicate-level soundness and whatever- 
level completeness have been left open for posterity. As for Lorenzen’s game semantics 

*This material is based upon work supported by the National Science Foundation under Grant No. 
0208816, and 2005 Summer Research Grant from Villanova University. 

1 A detailed discussion of how the two semantics compare is given in Sections 13 and 27 of [6]. 
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[3, 15], it has been seen as merely a technical servant to the existing syntactic con¬ 
struction rather than meaningful and inspiring enough in its own right to provide an 
ultimate justification for intuitionistic logic. 

In [6] the author introduced a program and framework for redeveloping logic as 
a formal theory of computability, as opposed to the formal theory of truth which it 
has more traditionally been. At the heart of that approach, baptized as computability 
logic (CL), is a game semantics. Games in CL are seen as formal equivalents of our 
broadest intuition of computational problems, specifically, computational problems in 
their most general interactive — sense. Computability, or algorithmic solvability, 
of such problems is understood as existence of an interactive Turing machine that 
wins the game no matter how the other player, which is the environment or the user, 
behaves. In this vision of logic, computability replaces the classical concept of truth, 
operations on games=problems replace Boolean connectives and quantifiers, and the 
understanding of logical formulas as (representing) computational problems comes in 
the place of their classical understanding as true/false statements, with valid formulas 
now describing universally correct principles of computability, and the logic in whole 
providing a systematic answer to the question on what and how can be algorithmically 
solved. 

This characterization makes the qualification “logic of problems" adequate for CL. 
Hence, in a search for a direct materialization of Kolmogorov’s thesis and (thus) the 
constructivistic claims of intuitionistic logic, the semantics of CL should be a reasonable 
candidate to try. Indeed, while the ambition of CL is to be a good tool for successfully 
navigating the real — non-man-made — world and, accordingly, its semantics has 
been created with no intention whatsoever to serve or justify any existing deductive 
systems, at the very time of its conception the conjecture was born 2 that the set of 
theorems of Heyting’s intuitionistic calculus is precisely what one gets by restricting 
the otherwise more expressive CL (here identified with the set of its semantically valid 
formulas) to a certain natural sublanguage, called in [6] the intuitionistic fragment. 
It should be noted that, unlike intuitionistic or linear logics, CL is a semantically 
rather than syntactically introduced theory and, at present, many questions on possible 
axiomatizations of various fragments of it, including the intuitionistic fragment, being 
far from trivial, remain open. 

The first step toward a positive verification of the above conjecture has been made 
in [11], where the soundness of the full first-order intuitionistic calculus with respect 
to the CL semantics was proven. As always, however, finding a completeness proof 
provided that one exists, of course — presents a greater challenge. The right strategy 
could be to approach the problem in a patient, step-by-step manner, starting from 
some relatively simple yet nontrivial fragment of the logic. The present paper tells a 
first success story on the way of following that strategy. It gives a completeness proof 
for the implicative fragment of propositional intuitionistic calculus. 

We are going to see that there are two operations of computability logic, >- and 
o— , that behave intuitionistically. That is, the implicative fragment of intuitionistic 

2 Officially stated in [6] as Conjecture 25.8. 

3 The operation o— in [6] was denoted by =►; it was renamed into o— later in [9, 10]. In this paper 
=i> has the different meaning of that of a separator of the two parts of a sequent. 
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logic is sound and complete regardless whether its implication is understood as >- or 
o—. The “real” intuitionistic implication, however, is o— rather than >-. That is 
because the behavior of >- is exactly intuitionistic only in isolation, and stops being so 
when >- is taken in combination with other operators: the full intuitionistic calculus 
with >- as implication is simply unsound, even though it most likely remains complete. 
For example, one could show that the intuitionistically provable formula 

(P >- R) >- ((Q >- R) >- ((P U Q) >- R ))), 

where Li means disjunction, fails to be a valid principle of computability logic. The offi¬ 
cial conjecture of [6] regarding the soundness and completeness of the full intuitionistic 
logic, and the verification of its soundness part in [11], assume reading intuitionistic 
implication as o—, and reading intuitionistic conjunction, disjunction and quantifiers 
as what computability logic calls choice operations n, U, I I, U. 

Choice operations in CL model decision steps in the course of interaction, with 
positive occurrences of disjunction and existential quantifier meaning machine’s choices, 
and positive occurrences of conjunction and universal quantifier meaning choices by its 
environment (in negative occurrences, the roles are interchanged). For instance, where 
f(x ) is a function, \~\x\-\y(^y = f(x)) is the game in which the first move/action/choice 
is by the environment, consisting in specifying a particular value m for x. Such a move, 
which intuitively can be seen as asking the machine the question “what is the value of 
/(m)?” brings the game down to the position \~iy(y = The next step is by 

the machine, who should specify a value n for y, further bringing the game down to 
n = f{in). The latter is understood as a moveless position won by the machine if true 
and lost if false. 4 The machine’s move n can thus be seen as answering/claiming that 
n is the value of /(to). From this explanation it must be clear that \~\x\-\y(y = f(x)) 
represents the problem of computing /, with the machine having an algorithmic winning 
strategy for this game iff / is a computable function. Similarly, where S' is a set, 
l~\x(x € SUa; 0 S) represents the problem of deciding S: here, again, the first move is 
by the environment, consisting in choosing a value to for x (asking “is m an element 
of S ?"): and the next step is by the machine who, in order to win, should choose the 
true disjunct of m G S U m S, i.e. correctly tell whether to is an element of S or not. 

As for >- and o— , these are two flavors of the operation of reducing one problem to 
another. Either one, as a reduction operation, induces — and will be often understood 
as — a reducibility relation. Specifically, a problem B is >—reducible or o —reducible 
to a problem A iff the corresponding compound problem A >— B or A o— B has an al¬ 
gorithmic solution. Both versions of reducibility are natural and important as both 
present conservative extensions of Turing reducibility. That is in the sense that they 
are equivalent to Turing reducibility when restricted to the traditional, two-step, in¬ 
put/output sorts of problems. >- and o— start to diverge only when their scope is 
extended to problems with higher degrees of interactivity — the kind of problems to 
which Turing reducibility is inapplicable for the simple reason of never having been 
defined or generalized. 

4 This should not suggest that the atoms of intuitionistic logic are required to be interpreted as 
moveless games/positions. Rather, they represent arbitrary interactive computational problems. 
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Intuitively, both A>~ B and A o— B are problems solving which means solving B 
while having A as an external computational resource, with an “external computational 
resource” meaning a to-be-solved-by-the-environment computational problem. More 
precisely, in the antecedent of an implication, the roles of the problem-solving machine 
and its environment are interchanged. Acting in the role of an environment there, the 
machine may observe how the antecedent is being solved, and utilize this information 
in its own solving the consequent. 

An example might help. Let T be a finitely axiomatized applied theory based on 
classical first-order logic, such as, say, Robinson’s arithmetic, and let x range over the 
formulas of the language of T. Next, let Prr(x) be the predicate “x is a theorem of 
T”, Pr(x) the predicate “x is provable in classical predicate calculus ”, and ~^Prr(x) 
and -i Pr(x) the ordinary negations of these predicates. As a decision problem, the 
T-theoremhood problem would be expressed by PI x(Prr(x) U -> Prr(x)). This is gen¬ 
erally undecidable, yet algorithmically reducible to the problem Pa: (Pr (x) U -iPr(x)) 
of provability in predicate calculus. The problem of reducing the former to the latter 
can then be expressed by 

V~\x(Pr(x) U ->Pr(x)) D \~\x(Prr{x) U ^Prr(x )), (1) 

where D is either one of the operators , o—. The obligation of a machine solving 
the above compound problem is to solve Pa :(Prr(x) U~<PrT(x)), i.e. answer any given 
question of the type “is F a theorem of T?” asked by the environment. Yet, the 
machine is expected to do so only on the condition that the environment does not fail 
to correctly solve the similar problem Per (Pr (x) U -'Pr(x)) in the antecedent, where 
the roles are switched and it is the machine who can ask questions like “is H provable 
in predicate calculus?”. So, here is an algorithmic strategy for the machine. Wait 
until the environment asks “is F a theorem of T ?” for some particular F. Then 
ask the counterquestion “is Ax —* F provable in predicate calculus?” , where Ax is the 
conjunction of all non-logical axioms of T. The environment will have to provide a 
correct yes/no answer, or else it loses. Whatever the answer of the environment in the 
antecedent is, repeat the same answer in the consequent, and rest your case. A success 
of this strategy is guaranteed by the deduction theorem for classical logic. 

Observe that the above explanation of the meaning of Ad B (where D £ { >- , o— }) 
is exactly what the Turing reduction of B to A is all about. The latter — more precisely, 
the Turing reducibility of B to A — is defined as existence of a Turing machine that 
solves B when having an oracle correctly answering any questions regarding A. We 
can see such an oracle as (a part of) the environment solving A for the machine, 
thus providing an external computational resource. The only difference is that the 
resource provided by an oracle is always a simple question-answering type of a task 
such as the above \~\x(Pr(x)U^Pr(x)) , while the antecedent (as well as the consequent, 
of course) of a - or o —implication can have an arbitrarily complex interaction 
interface. For instance, (1) is already a problem with a non-standard interface, and 
CL, unlike traditional approaches, allows us to meaningfully talk about reducing (1) 
itself to yet another problem, or reducing another problem to it. 

A relevant question here is whether and how the antecedent, as a resource, is allowed 
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to be reused or “recycled”. The answer to the whether part of this question is yes for 
both >- and o—. Turing reduction does not impose any limits on how many times 
the oracle can be queried. Similarly, if our strategy for (1) had a need to repeatedly 
ask “is H provable in predicate calculus?” (for various H s), it would have been able to 
do so. This essentially means that multiple copies rather than a single copy of A are 
played in the antecedent of A >- B or Ao— B. 

As an aside, computability logic, of course, does have a stronger reduction operation 
which forbids repeated usage of the antecedent. The symbol for it is —►. In fact, —> 
is considered the basic sort of reduction: A^ B and Ao— B are defined through it as 
kA — > B and o A —> B, with A and o being two flavors of what CL calls recurrence 
(=reusage) operations, both reminiscent of the storage operator ! of linear logic. 5 Not 
surprisingly, the logical behavior of —> turns out to be different from that of >- and 
o— even in isolation: informally speaking, the former is (plainly) resource-sensitive 
while the latter are not. The following classical tautology 

(P D (Q D R)) D ((P D Q) D (P D R)) 

is an example of an implicative formula which is valid with both >- and o— in the 
role of D but invalid with —>. And an example of a tautology invalid with all three 
reduction operators DG {—>, >-, o— } is 

((P D Q) D P) D P 

which, known as Pierce’s Law , is the shortest formula separating the implicative frag¬ 
ments of classical and intuitionistic logics. 

Back to the resource reusage question, it is its how part where > - and o— start to 
differ from each other. Ao—B allows reusage of A in the strongest possible sense, which 
makes o— the weakest possible form of reduction, putting >- strictly between o— and 
—Both A >-P and Ao—B — more precisely, their kA and A A parts on which we 
are currently focused — can be characterized as games where the machine is allowed 
to restart the resource game A an unlimited number of times without abandoning the 
already-in-progress sessions of A , thus forcing the environment to play/solve multiple 
parallel copies of A. The difference is that in Ao—B , unlike A^B, the machine 
does not have to restart A from the very beginning every time it wants to reuse it; 
rather, the machine is (essentially) allowed to backtrack to any of the previous — not 
necessarily starting — positions and try a new continuation from there, thus depriving 

5 As the closest relative of our A (but not A) should be named Blass’s [1, 2] semantically introduced 
repetition operation R rather than Girard’s syntactically introduced storage operator !. In very ab¬ 
stract, intuitive terms, R could be characterized in a way rather similar to our characterization of 
A given shortly. This means that the general game philosophy behind & is largely the same as that 
behind R. However, when it comes to a materialization of that philosophy — to the technical level, 
that is — the similarity between the two operations is lost. The difference is partly related to the 
fact that R is only applicable to a limited sort of games called strict in CL, while A is applicable to 
everything we would potentially call an interactive computational task. Such a difference is somewhat 
reminiscent of the earlier-discussed difference in the degrees of generality between Turing reduction 
and our >— , o— , even though R, unlike Turing reduction, is on the interactive side, of course. This is 
by no means a historical survey paper, and therefore we refer to Sections 13 and 27 of [6] for a further 
discussion of how A and R compare. Note that the symbol used in [6] for A was !. 
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the adversary of the possibility to reconsider the moves it has already made in that 
position. This is in fact the type of reusage every purely software resource allows or 
would allow in the presence of an advanced operating system and unlimited memory: 
one can start running process A; then fork it at any stage thus creating two threads that 
have a common past but possibly diverging futures (with the possibility to treat one of 
the threads as a “backup copy” and preserve it for backtracking purposes); then further 
fork any of the branches at any time; and so on. The less flexible type of reusage of A 
assumed by A>- B, on the other hand, is closer to what infinitely many autonomous 
physical resources would naturally offer, such as an unlimited number of independently 
acting robots each performing task A 1 or an unlimited number of computers with 
limited memories, each one only capable of and responsible for running a single thread 
of process A. Here the effect of replicating/forking an advanced stage of A cannot 
be achieved unless, by good luck, there are two identical copies of the stage, meaning 
that the corresponding two robots or computers have so far acted in precisely the same 
ways. 

As already pointed out, however, this difference between A>- B and A o— B 1 while 
substantial in the general (truly interactive) case, is too subtle to be relevant when 
A is a game that models only a very short and simple potential dialogue between the 
interacting parties, consisting in just asking a question and giving an answer. That is, 
when A is from the class of problems to which the scopes of the ordinary concepts of 
computability, decidability or reducibility have been traditionally limited. And this is 
exactly why both of the two — >- and o— — versions of reducibility, when restricted 
to those special sorts of problems, fully coincide with the kind old textbook concept of 
Turing reducibility. As noted, the benefits from the greater degree of resource-reusage 
flexibility offered by A a- B (as opposed to A>~B) are related to the possibility for 
the machine to try different reactions to the same action(s) by the environment in A. 
But such potential benefits cannot be realized when A is, say, ria;(Pr(a:) U -> Pr(x )). 
Because here a given individual session of A immediately ends with an environment’s 
move, to which the machine simply has no legal or meaningful responses at all, let 
alone having multiple possible responses to experiment with. 

Some readers might want to stop at this point and go no farther. That is because 
the rest of this paper is only meant for those who are already sufficiently familiar 
with computability logic, or are willing to do some parallel reading. CL has been 
introduced and reintroduced several times already ([6, 7, 8, 9, 10, 11]), and it is neither 
technically nor ethically feasible any more to do so once again, or even to reproduce 
all relevant formal definitions. Such definitions, without accompanying explanations 
and illustrations, may not be very helpful in getting a necessary degree of a feel of 
the subject, anyway. This article does rely, both technically and motivationally, on 
some prior material. Specifically, the proofs presented here should be read after or in 
parallel with the relevant parts of [10], which serves as a source of all special notation, 
terminology and concepts for the present paper (call it an appendix if you wish). While 
long, [10] is easy to read as it is written in a semitutorial style, without assuming any 
preliminary knowledge of the subject. Every unfamiliar term or notation used but 
not defined in the present paper can and should be looked up in [10], which has a 
convenient index of all terms and symbols. Familiarity with or parallel reading of [10] 
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is a necessary and sufficient condition for understanding the rest of this paper. 


2 Affine logic 

Some of the proofs given in this paper will rely on the fact of the soundness of affine 
logic with respect to the CL semantics, established in Section 11 of [10]. Below we 
reproduce the relevant propositional, unit-free, multiplicative-exponential — frag¬ 
ment of affine logic written in the symbols of CL. We follow the notational conventions 
of [10], according to which G stands for any (possible empty) finite sequence of formu¬ 
las, Y G for any finite sequence of Y-prefixed formulas, etc. The nonunderlined letters 
E,E, E, G, E, E stand just for formulas. Sequents in this version are one-sided, i.e. 
understood as just sequences of formulas rather than pairs of such sequences. 

The axioms of (our present fragment of) affine logic are all sequents of the form 

^E,E, 

and the rules of inference are given by the following schemata: 


Exchange 

Weakening 

G,E,F,H 

G 

G,F,E,H 

G, E 

Y-Contraction 

?- Contract ion 

g, Ye, Ye 

G,?E,?E 

g, Ye 

G,?E 

V-Introduction 

A-Introduction 

G, Ei,..., E„ 

Gi, Ei • • • G„, E„ 

G, E\ V ... V E n 

Gi, • • •, G n , Ei A ... A E„ 

Y-Introduction 

?-Introduction 

G, E 

G, E 

g, Ye 

G,?E 
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A-Introduction 

YG_,E 


o-Introduction 


Y G,kE 


%G,E 


?G,AF 


This formulation does not officially forbid —> in formulas, but it treats E —> F as an 
abbreviation of ~>E V F, which explains why there are no rules for —>. More precisely, 
derivability of a formula containing —> is to be understood as derivability of the result 
of eliminating —> from that formula according to the above definition/prescription. 
Similarly, E >- F is understood as ~^kE V F (i.e. kE —> F) and Bo-F as -iA E V F 
(i.e. oE —> F). And, when applied to nonatomic formulas, -> is understood as an 
abbreviation defined by -i->E = E, n(£iV.. .VE n ) = ->Ei A.. .A-i E n , -<(EiA. . .A E n ) = 
—>E\ V ... V -I E n , —>kE = Y —<E, —'Y if = k~iE , -1A if = ? —'if, —i? if = A - 'if. 

Affine logic, in its full (_L, T, U. n, IH, U-containing) language, was proven to be 
sound in [10] in the strong sense that, whenever a formula E is provable in it, E is 
not only valid but also uniformly valid, and that, furthermore, there is an effective 
procedure that takes an arbitrary proof of an arbitrary formula and constructs a uni¬ 
form solution for that formula. That result, of course, automatically remains true for 
our present fragment of affine logic. This fragment is all we need in this paper, and 
henceforth we refer to it as affine logic , even though it is only a fragment of the latter 
in the proper sense. 

The difference between our version of affine logic and Girard’s [4] affine logic is 
minor, related to the presence of the two — A, Y and o,? — groups of recurrence 
(“exponential”) operators rather than one group. Such a difference is not important 
because these groups of exponentials, having exactly the same inference rules, are 
deductively indistinguishable (from each other and from Girard’s !,?). 

A known ([4]) result for affine logic straightforwardly applies to our version of it, 
according to which the logic is closed under the rule 


Cut 

G,E ^E.H 


G,H 

Understanding E —> F, E >- F and E <^F as abbreviations of -*E V F, ~^kE V F 
and -iA-EV-F (but not forbidding -i to be applied to compound formulas), an occurrence 
O of a subformula in a given formula, as usual, is said to be negative iff it is in the 
scope of an odd number of occurrences of otherwise it is positive. The following 
lemma is true no matter whether —>, >—, o— are considered primitive symbols or not, 
or whether -> is allowed to be applied to compound formulas or not. 



Lemma 2.1 Let G i, G 2 , Hi, H 2 be arbitrary formulas of the language of affine logic, 
such that the following two conditions are satisfied: 

• l-Gi -f G 2 ; 

• Gi is a subformula of Hi, and H 2 is the result of replacing in Hi a certain 
occurrence O (fix it) of G 1 by G 2 . 

Then we have: 

a) If the occurrence O is positive, then Hr Hi —> H 2 . 

b) If the occurrence O is negative, then HI ~H 2 —► Hi. 

Proof. Assume the conditions of the lemma (those that go before “Then we 
have:”). We also may and will assume that all of the connectives of Hi are among 
—o , A and A. Indeed, if this is not the case, then Hi can be replaced by H [, where H[ 
is the result of eliminating the unwanted connectives trough rewriting each subformula 
Ei V ... V E„ as -'(-'id A ... A ~>E n ), each subformula ?E as -'o ~>E, each subformula 
E —> F as -iE V F (and then as -1 (E A - | E)), etc. Based on what we know from [10], 
for every interpretation * we would have H( = H\ (yes, equality rather than just 
equivalence). And the positive/negative status of any (occurrence of a) subformula of 
Hi would remain the same in H[. To summarize, Hi and H[ would be “the same” in 
every aspect relevant to our lemma, and hence could be safely identified in this proof. 

We proceed by induction on the complexity of Hi — more precisely, the complexity 
of Hi minus the complexity of Gi, for the complexity of the Gi part of H\ is irrelevant. 
In this proof we will explicitly or implicitly rely on the fact of the closure of uniform 
validity under modus ponens proven in Section 13 of [10], and the already mentioned 
fact of the soundness of affine logic with respect to uniform validity. 

If Hi = G 1 , then H 2 = G 2 . Here the occurrence of Gi in Hi (i.e. in itself) is 
positive, and we have Hr Hi —> H 2 just by our assumption that HrGi —> G 2 . 

Next, assume Hi = ~<Ei, and the occurrence O of Gi in Hi is the occurrence O’ 
of Gi in Ei. Let E 2 be the result of replacing in E\ the occurrence O' by G 2 . Of 
course, H 2 = ~>E 2 . Suppose O is positive. Then O' is negative. By the induction 
hypothesis, l-E 2 —> Ei. It is an easy syntactic exercise to verify that affine logic proves 
(E 2 -4 Ei) -4 {-.Ei -4 - 1 E 2 ), i.e. (E 2 -4 Ei) -4 {Hi -4 H 2 ). Hence Hr{E 2 -4 Ei) -4 
{Hi —4 H 2 ) and, by (the closure of uniform validity under) modus ponens, Hr Hi —4 H 2 . 
The case when O is negative will be handled in a symmetric way. 

Next, assume Hi = d>Ei, and the occurrence O of Gi in Hi is the occurrence 
O' of Gi in Ei. Let E 2 be the result of replacing in Ei the occurrence O' by G 2 . 
We thus have H 2 = oE 2 . Suppose O is positive. Then so is O' . By the induction 
hypothesis, If-Ei —4 E 2 . Then, according the o-closure lemma proven in Section 13 of 
[10], l-o(Ei —4 E 2 ). One can routinely verify that affine logic derives o{Ei -4 E 2 ) -4 
(A Ei -4 bE 2 ), i.e. o(E 2 -4 Ei) -4 {Hi -4 H 2 ). Hence Hrb(E 2 -4 Eh) -4 (Hi -4 H 2 ) 
and, by modus ponens, Hr Hi —> H 2 . The case when O is negative will be handled in a 
symmetric way. 

The case Hi = kEi is similar to the previous one, with the only difference that it 
relies on the A-closure lemma rather than the o-closure lemma of Section 13 of [10]. 
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Finally, assume that (Hi ^ Gi and) the main operator of Hi is A. As an example, 
here we only consider the case Hi = EiAF, where the occurrence O of Gi in Hi is the 
occurrence O' of G i in Ei. All other cases will be similar. So, we have Hi — E 2 A F, 
where E 2 is the result of replacing in Ei the occurrence O' by G 2 . Suppose O is 
positive. Then so is O'. By the induction hypothesis, VhEi—> E 2 . One can also verify 
that affine logic proves (Ei-+E 2 ) —> (Pi A F—>P 2 A F), i.e. (Pi—>P 2 ) —> (Pi—>P 2 ). 
Hence >P 2 ) —> (H 1 —> H 2 ) and, by modus ponens, VhHi—>H 2 . The case when O 

is negative will be handled in a symmetric way. □ 


3 Intuitionistic logic 

3.1 Syntax 

The implicative fragment of intuitionistic logic comes to us in two versions: Int^ , 
which reads intuitionistic implication as o—, and Int^ , which reads it as . Its 
language has infinitely many propositional (i.e. 0-ary) letters (=atoms), for which we 
use the metavariables P, Q , R, X, Y, Z , W, possibly with indices. It should be noted 
that, when it comes to interpretations, these are general rather than elementary letters 
(see [10], Section 7), just as the letters of affine logic are. The formulas of the language 
of Int°”, to which we refer as Int° _ -formulas, are built from atoms in the standard 
way using the binary operator o—. There are no other operators in the language, nor 
are there any logical atoms such as T or A. Similarly for the language of Int^, with 
Int^-formulas using >- instead of o—. The languages of Int° _ and Int^ are thus 
sublanguages of the language of affine logic. 

Next, an Int° _ -sequent is a pair G => E. where G, called the antecedent, is 
any finite sequence of Int 0_ -formulas, and E, called the succedent, is a (one single) 
Int° - -formula. Int^-sequents are defined similarly. Unlike our choice of one-sided 
sequents for affine logic, here we thus deal with two-sided sequents. 

Below is a Gentzen-style deductive system for Int^. A formula K is considered 
provable in it iff the empty-antecedent sequent => I\ is provable. 

The axioms of Int° - are all Int -sequents of the form K => K , and the rules of 
inference are: 

Exchange 

G,E,F,H=>K 
G, F,E,H_=> K 




Weakening 

G=> AT 
G,E=aK 


Contraction 


G,F,F => K 


G,F=>K 
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Right o— 

G,F=>K 


Left o— 


H^K 2 


G=>F 


- 1 < 


G,F=> I<i 

G. H, K 2 o- F => A' , 


The system Int^ is defined in the same way as Int°~, only with > instead of o— , 
of course. 

3.2 Kripke semantics 

A Kripke model [13] is a triple At = (W, 1Z, ^), where: 

• W is a (here) finite set of what are called worlds (of At). 

• 1Z is a transitive and reflexive relation between worlds. When plZq, we say that 
world q is accessible (in At) from world p. 

• ^ is a relation between worlds and Int “"-formulas, satisfying the following two 
conditions for all formulas E , F and worlds p , q\ 

— if p ^ E and plZq , then q ^ E; 

— p ^ E o— F iff, wlrenevr plZq and q ^ E, we have q ^ F. 

When G is a sequence or a set of formulas, we write p ^ G to mean that p ^ G for 
every formula G of G. The relation ^ further extends to sequents by stipulating 
that p ^ G => E iff, for every world q accessible from p, if q ^ G, then q^E. The 
symbol ^ , as expected, will be used for the negation of ^ . 

Let At = (W, TZ, ^ ) be a Kripke model. Where A is a Int“"-formula, or a sequence 
of Int°”-formulas, or a set of Int“"-formulas, or a Int°"-sequent, we write At ^ T to 
mean that p^F for every p G W. And we say that an Int°~-formula E is At- 
equivalent to an Int “"-formula F — symbolically At^£o-oF — iff E o— F 
and At ^ F o— E. Obviously At ^ E o-o F means that, for each world p of At, p ^ E 
iff p\^F, so that “At does not see any difference between E and F”. Note also that 
whenever At ^ E o-o E' and At ^ F o-o F', we also have At ^ (E o— F) o-o (E' o— F'). 
We read C N ? (whatever £ and q are) as “c is true in £”, and as “? is false in 

r- 

It is an established ([13]) fact that Int°" is sound and complete with respect to 
Kripke semantics, in the sense that an Int “"-sequent or formula S is provable in Int°" 
if (completeness) and only if (soundness) S is true in every Kripke model. For 
known and straightforward reasons, Kripke models here can be restricted to ones where 
(W, TV) forms a tree rather than just a partial order, and the above fact then can be 
rephrased by saying that a sequent or formula is provable in Int°~ iff it is true in the 
root world of every tree-like Kripke model. 
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3.3 Main theorem 


By a Ei-predicate we mean a predicate that can be written as 3 zA for some de¬ 
cidable Unitary predicate (elementary game) A. And a Boolean combination of 
Ei-predicates is a -i, A, V-combination of such games. 

Note that, since we deal with a propositional language, every interpretation is 
admissible for every formula. So, when considering interpretations, there is no need to 
bother about or even mention their admissibility. 

Below is our main theorem, according to which the implicative fragment of intu- 
itionistic logic is sound and complete with respect to the semantics of computability 
logic, no matter whether the intuitionistic implication is read as >- or o—. Both the 
soundness and the completeness clauses come in certain strong forms. 

Theorem 3.1 For any Int 0- - (resp. Int ^ -) formula K, K is provable mint 0- (resp. 
Int ) iff K is valid iff K is uniformly valid. Furthermore: 

(a) There is an effective procedure that takes an arbitrary Int 0- - (resp. Int^-) 
proof of an arbitrary formula I\ and constructs a uniform solution for K. 

(b) If an Int° - - (resp. Int^-) foi'mula I\ is not provable in Int 0- (resp. Int^,), 
then K* is not computable for some interpretation * satisfying the following complex¬ 
ity condition: * interprets every atom (of the languages of Int° - , Int^j as a problem 
of the form U xB, where B is a Boolean combination of Ei -predicates. 

Proof. As already mentioned and relied upon, affine logic is sound in the strong 
sense of clause (a) of this theorem ([10], Section 11). So, to prove the soundness of 
Int° - , Int^ and the corresponding clause (a), it would be sufficient to show that affine 
logic derives any formula I\ that Int° - or Int^ does, and that, furthermore, that an 
affine-logic proof of K can be effectively constructed from an Int 0- - or Int^ -proof of 
it. This purely syntactic and easy-to-verify (by induction on the lengths of proofs) fact 
can be considered already known in the form of Girard’s [4] embedding of intuitionistic 
calculus into linear (and hence also affine) logic. Indeed, unlike intuitionistic disjunction 
for which Girard’s reading is essentially different from ours, 6 intuitionistic implication 
from F to G in [4] is understood as \F —► G, just like we read it as AF —> G or KF —► G. 
Of course, the soundness of Int 0- also immediately follows from the soundness of the 
full intuitionistic calculus proven in [11]. 

As for the completeness part of Theorem 3.1 and the corresponding clause (b), this 
is exactly to what the rest of the present paper is devoted. □ 

4 Machines playing against machines 

This section borrows a discussion from [7], providing certain background information 
necessary for our completeness proof but missing in [10], the only external source on 

6 Girard’s translation for the intuitionistic disjunction of F and G is !.F®!G, while our reading is 
(simply) FUG. This explains why one could not apply a similar soundness argument to Int^ in the 
full (disjunction-containing) language, which, as mentioned in Section 1, can indeed be shown to be 
unsound. 
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computability logic on which the present paper was promised to rely. 

Remember that -T, when F is a run, means the result of reversing all labels in F. 
For a run T and a computation branch B of an F1PM or EPM, we say that B cospells 
r iff B spells ->r in the sense of Section 6 of [10]. Intuitively, when a machine M plays 
as _L (rather than T), then the run that is generated by a given computation branch 
B of A4 is the run cospelled (rather than spelled) by B, for the moves that M makes 
get the label _L, and the moves that its adversary makes get the label T. 

We say that an EPM £ is fair iff, for every valuation e, every e-computation branch 
of £ is fair in the sense of Section 6 of [10]. 

Lemma 4.1 Assume £ is a fair EPM, PL is any HPM, and e is any valuation. There 
are a uniquely defined e-computation branch Bg of £ and a uniquely defined e-computation 
branch Bh of Pi - which we respectively call the (£ , e, 7i)-branch and the (PL,e,£)~ 
branch — such that the run spelled by Bu, called the PL vs. £ run on e, is the run 
cospelled by Bg. 

When PL,£,e are as above, V is the Pi vs. £ run on e and A is a game with 
Wn(*(r) = T (resp. Wn)f(r) = _L), we say that PL wins (resp. loses) A against £ 
on e. 

A strict proof of the above lemma can be found in [6] (Lemma 20.4), and we will 
not reproduce the formal proof here. Instead, the following intuitive explanation would 
suffice: 

Proof idea. Assume PL, £, e are as in Lemma 4.1. The play that we are going to 
describe is the unique play generated when the two machines play against each other, 
with PL in the role of T, £ in the role of _L, and e spelled on the valuation tapes of both 
machines. We can visualize this play as follows. Most of the time during the process 
PL remains inactive (sleeping); it is woken up only when £ enters a permission state, 
on which event PL makes a (one single) transition to its next computation step — that 
may or may not result in making a move — and goes back to sleep that will continue 
until £ enters a permission state again, and so on. From £’s perspective, PL acts as a 
patient adversary who makes one or zero move only when granted permission, just as 
the EPM-model assumes. And from PL's perspective, who, like a person in a comma, 
has no sense of time during its sleep and hence can think that the wake-up events 
that it calls the beginning of a clock cycle happen at a constant rate, £ acts as an 
adversary who can make any finite number of moves during a clock cycle (i.e. while PL 
was sleeping), just as the HPM-model assumes. This scenario uniquely determines an 
e-computation branch Bg of £ that we call the {£ , e, PL (-branch, and an e-computation 
branch B-u of PL that we call the (PL, e, £ (-branch. What we call the PL vs. £ run on 
e is the run generated in this play. In particular — since we let PL play in the role of 
T - this is the run spelled by B-^. £, who plays in the role of _L, sees the same run, 
only it sees the labels of the moves of that run in negative colors. That is, Bg cospells 
rather than spells that run. This is exactly what Lemma 4.1 asserts. O 


13 



5 Standardization 


Let us agree that, throughout this section, “formula” means Int^-formula, “sequent” 
means Int -sequent, and “provable” (b) means provable in Int . 

We say that a sequent is standard iff it is 

X 1 <^(Y 1 c^Z 1 ), X s c^(Y s ^Z s ), } 

? => W, 

{Pi °— Qi) °— Ri, {Ps °— Qs) 0 —Ps J 

where s > 0 and the X, : , 1), Z*, P,;, Qi,Ri (1 <i < s) and W are atoms. 

Where K is a formula and H is a subformula of it, throughout this section we 
will be using the notation H K for a certain atom which, intuitively, is a “standard 
atomic name” assigned by us to H. Specifically, let G \,..., G s be all of the non-atomic 
subformulas of K listed according to the lexicographic order, and let W \,..., W s be 
the first (in the lexicographic order) s atoms of the language of Int°~ not occurring in 
K. Then we define the atom H K by stipulating that: 

• H k = H if H is atomic; 

• H k = Wi if H = Gi (1 < i < s). 

Let K be a formula, and 

Gi = Eio—Fi, ..., G s = E S <^F S 

all of its non-atomic subformulas, listed according to the lexicographic order. We define 
the standardization of K as the following sequent: 

G\ °—{E^ o—F*), ..., Gf c 
(Pf c^Pf)c^Gf, ..., (Pf 

Notice that the standardization of K is (indeed) a standard sequent. 

Example: Where W\, W 2 , W 3 are lexicographically the first three atoms different 
from Q and R , the following sequent is the standardization of Q o— ((Q o— R) o— P.): 

W^iQ^R), W 2 ^{W 1 ^R), W 3 ^{Q^W 2 ), 

{Q o— R) o — W \, {W 1 c^R)c^W 2 , {Q o— W 2 ) o— W 3 

Lemma 5.1 Let K be an arbitrary foi'mula, G => W its standardization, and A4 = 
(W,7Z, ^) a Kripke model with Ai^G. Then every subformula H of K is Ad- 
equivalent to H K . Consequently, AA^K 0-0 W. 

Proof. Let K, G =3- W, A4, Fk be as the lemma assumes. We proceed by 
induction on the complexity of H. The case when FI is atomic is trivial, because 
then Fl K = FI. Suppose now F[ = E o— F. Then G contains Fl K o— {E K c ^ F K ) and 
(. E k o— F k ) c F[ k . Therefore, as A4 ^ G, we have 

M\={E K <^F K ) 00 H K . 
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But, by the induction hypothesis, At ^ E K o-o E and Ad ^ F K o-o F. Hence 

At ^ {E k o- F k ) 0^5 (E o- F). 

Consequently, At ^ (E o— F) o-o H K , i.e. At ^ H o-o H K . □ 

Lemma 5.2 If 1 a formula is not provable, then its standardization is not provable, 
either. 

Proof. Consider an arbitrary formula K and its standardization G => W. Assume 
I/ K. Then, by the completeness of Int° _ with respect to Kripke semantics, there is a 
model At = (W, 1Z, ^ ) with At K. We may assume here that, for every subformula 
H of K, Ai^Ho-oH K . Indeed, when H is atomic, then it is automatically Ad- 
equivalent to H k because H = H K . And if H is not atomic, then H K is not among 
the atoms of K , and we may make arbitrary assumptions regarding in what worlds the 
atom H k is true without affecting the fact that Ai\£K] so, our assumption is that 
H k is true exactly in the the worlds where H is true. 

We claim that A i^G. Indeed, pick an arbitrary formula H of G. We need to 
show that At ^ H. There are two cases to consider, depending on the form of H. 
One possibility is that H = G K o— (E K o- F K ). By the above assumptions regard¬ 
ing At , we have At ^ G K o-o G, At ^ E K o-o E and At ^ F K o-o F. So, in order to 
verify that Ad ^ H, it would suffice to show that Ad^Gc^(Ec^F). But this is 
trivially so because — note — G is nothing but E o—F. The other possibility is 
H = ( E k o—F k ) o — G k , which is similar. 

Now, as At^K, we have Ai\£W because, by Lemma 5.1, At ^ W o-o K. This, 
together with At ^ G, means that Ad^G=> W. Therefore, by the soundness of Int° - 
with respect to Kripke semantics, I f G=> W, as desired. □ 

Lemma 5.3 Let K be an arbitrary formula, and G => W its standardization. Then 
b K,G => W. 

Proof. Assume, for a contradiction, that G => W is the standardization of a 
formula K , and 1/ K, G => W. Then, by the completeness of Int^ with respect to 
Kripke semantics, there is a Kripke model At = (W,1Z, with Ad^K,G => W, 
meaning that, for some world p £ W, we have p^K, p^G and p^W. Obviously 
here we may assume that every world is accessible from p , so that At ^ G. Then, by 
Lemma 5.1, At ^ K o-o W. But this is a contradiction, because p ^ K and p ^ W. □ 


6 Desequentization 

In this section, we will write Int° - b for provability in Int^" and ALb for provability 
in affine logic. 

' In fact, this lemma can be shown to be true in the stronger “if and only if” form, but for our 
purposes this is not necessary. 
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Let S be the (arbitrary) standard sequent 


X S ^(Y S ^Z S ), ) 

> => w. 

{Pi °—Qi)°—Ri, •••, {P s °—Qs) °—R s J 

Then we define the desequentization of S as the following formula of the language 
of affine logic: 


A (X\ A Yi —> Z\) A ••• aA(A s A Y S ->Z S ) A 

-> W. 

A ((iPi -» Qi) —> Pi) A • • • A A ((AP, -> Q«) -► P fl ) 

As an aside, the desequentization of S should not be understood as expressing 
the “intended meaning” (say, as defined in [11]) of S. A formula expressing the in¬ 
tended meaning of S can be obtained from the above one by inserting a o before every 
sub formula A,;, Y, and (o Pi —> Qi). S and its desequentization are not semantically 
equivalent: the latter, with its missing occurrences of A, is weaker than the former. 

Lemma 6.1 Assume K is an Int °~ -formula, and D is the desequentization of the 
standardization of K. Then, for any interpretation * with ]= K*, we have |= D*. 

Proof. Consider an arbitrary Int -formula K and an arbitrary interpretation * 
with |= K*. Let 


Xi o- (n Zi), '' •, o- (Y a o- Z s ), \ 

> =>■ W (2) 

(Pio-Qi)o-Ri, {P s o— Q s ) o— R s J 

be the standardization of K. Using Gi ,..., G 2 S as abbreviations of the 2s formulas of 
the antecedent of the above sequent, we rewrite it as 

Gi, • • •, G2 s =>■ W. 

According to Lemma 5.3, 

Int 0- h K , Gi,, G 2s =► W. 

From here, applying the Right o— rule 2s + 1 times, we get 

Int°" h K o- (Gi a- (G 2 a- ... (G 2s o- W)...)). 

As noted in our proof of the soundness part of Theorem 3.1, affine logic proves every 
formula provable in Int°". So, the above Int ^-provability translates into 

AL b K a- (Gi a- (G 2 a- ... (G 2s o—W) . ..)). (3) 

Next, in a routine syntactic exercise, one can show that 

AL h ->{K a- (Gi a- (G 2 a- ... (G 2s o-W).. .))), A A' -» (AGi A ... A AG 2s -► W). 
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The above, together with (3), by the closure of affine logic under cut, implies 
AL b A K -► (iGi A ... A AG 2s -> W), 
whence, by the soundness of affine logic, 

H oK* —> (iGi A ... A oG 2s —> W)*. (4) 

According to the theorem of Section 10 of [10], the rule of modus ponens preserves 
computability. And, according to one of the lemmas of Section 13 of [10], so does 
the rule “from A to A A”. So, our assumption |= K* implies |= o K*, and the latter, 
together with (4), by the closure of computability under modus ponens, implies 


b (AGi a ... a Ag 2s —► wy. 

If we now disabbreviate the GjS, the formula AGi A ... A AG 2s — > W rewrites as 

A (AXl —> (Add —> -Zi)) A • • • A A (oX s —+ (A Y s —> Z s )) A 
A(A(APi -»• Qi) -> Ri) a ••• a A (A(A-P S —> Q s ) —■* Rs) 

so we have b (5)*- Next, consider the formula 

A(AXi A Aid —* Zi) A • • • A A(Ax s A Aid —* Zg) A 

—> w. 

A(A(At*i —> Qi) —* Ri) a ••• a A (o(oP s — 1 > Qs) • Rs) 


(5) 

( 6 ) 


One can easily verify that affine logic proves (5) —> ( 6 ) and hence, by the soundness 
of affine logic, b (5)* —► ( 6 )*. From here and |= (5)*, by the fact that modus ponens 
preserves computability, we infer 


b (6)*. 

Next, for any formula E, of course, AL b A E — » E. Hence, by the soundness of 
affine logic, 

M-A E->E (any E). (7) 

Now, consider the desequentization D of (2), which is 

A (Ad A Id —*■ Zi) A ••• AA(X S A Y s Z s ) A 

—*• W. 

A((APi ->• Qi) ->• Ri) a ••• a A ((A P s ^Qs)-*Rs) 

Observe that D is nothing but the result of deleting A before every subformula X,; , 
Id and (A Pi Qi) in (6). And (the occurrences of) all such subformulas are positive. 
So, with (7) in mind, we can rely — 3s times — on Lemma 2.1 in combination with 
the Transitivity lemma of Section 13 of [10], and conclude that Hb(6) —> D 8 and hence 
b (6)* —> D*. This, together with the earlier established fact b (6)*, by the closure 
of computability under modus ponens, implies the desired b D*. □ 


8 Of course, we could have shown the same by verifying that (the sound) affine logic proves (6) —> D. 
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7 Main lemma 


Lemma 7.1 If a standard Int °~-sequent is not provable in Int°”, then its desequenti- 
zation D is not valid; specifically , there is an interpretation * satisfying the complexity 
condition of clause (b) of Theorem 3.1 such that D* is not computable. 

The present section is entirely devoted to a proof of this lemma. But before we start 
our long journey through that proof, let us see that this lemma implies the completeness 
of Int°”, in the strong form of clause (b) of Theorem 3.1. 

Indeed, suppose K is an Int C)_ -formula not provable in Int°~. Let S be the stan¬ 
dardization of K. By Lemma 5.2, Int° _ does not prove S. Then, by our main lemma 
7.1, D* is not computable, where D is the desequentization of S and * is an interpre¬ 
tation satisfying the complexity condition of clause (b) of Theorem 3.1. But then, by 
Lemma 6.1, for the same interpretation *, K* is not computable. Done! 

Thus, as far as the Int 0- part of our main Theorem 3.1 is concerned, our only 
remaining duty is to prove Lemma 7.1. The Int 1- part of Theorem 3.1 will be taken 
care of in Section 8. 


7.1 Main claim 

Let us get started with our proof of Lemma 7.1. We pick and fix an arbitrary standard 
Int 0- -sequent 

X^iYiO-Zi.), ■■■, X a o-(Y„o-Z a ), } 

> =» W, 8 

(Pio-Qi)o-R lt (P s o— Q s ) o— R s j 

and assume that Int 0- I/ (8). 

Let us agree for the rest of this section that 

j and i exclusively range over 1 , ..., s and 1 ,... , 2s, respectively. 

The desequentization of (8) is 


o(Xi Alj —» Z\) A • • • A i(X s A Y S ->Z S ) A 
i((APi -Qi) -i*i) A • • • A i((iP s ->Q a ) -+Rs) 


W. (9) 


Thus, our goal is to find a counterinterpretation (satisfying the complexity condition 
of Theorem 3.1) for the formula (9), with a counterinterpretation here meaning an 
interpretation * such that (9)*. 

Once again remember, from Section 7 of [10], the distinction between general and 
elementary letters. Elementary letters are to be interpreted as predicates (elemen¬ 
tary games), while general letters can be interpreted as arbitrary static games. As 
noted before, the letters (atoms) of both affine logic and intuitionistic logic are general 
rather than elementary. However, when it comes to interpretations, formulas with only 
elementary letters — called elementary-base formulas — are both technically and intu¬ 
itively easier to deal with than those with general letters. For this reason, we are going 


18 



to replace (9) with the elementary-base — though no longer propositional — formula 
(10) of the same form as (9), and then construct a counterinterpretation for (10) rather 
than (9). 

In particular, for each atom A of the language of Int° - , we fix a unique 1-ary 
elementary letter A — unique in the sense that whenever A ^ B, we also have A ^ B. 
We also fix a variable x and, for each atom A of the language of Int° _ , agree on the 
abbreviation A defined by 

A = UxA(x). 

Now, the above-mentioned elementary-base formula (10) is simply obtained from (9) 
through replacing every atom A by A: 


A(-Xi A Fi —> Zi) A ••• A i(X s A Y s ->Zs) A 

'.A v w „ u -► W. (10) 

i((APi -Qi) -+Ri) A ••• A A((iP a -Q s ) -+R a ) 

We label the following statement (and subsequent similar statements) “claim” 
rather than “lemma” because it is true only in our particular context, set by the 
assumption that (8) is not provable in Int° _ . 


Claim 7.2 There is an interpretation * with (10)*, satisfying the complexity 
condition that * interprets every elementary atom as a Boolean combination of £i- 
predicates. 


Before we attempt to prove Claim 7.2, let us see that it implies the main Lemma 7.1. 
Remember that our assumption, within the proof of Lemma 7.1, is that Int°” \f (8). 
According to Claim 7.2 which is based on that assumption, we have (10)*, where * 
is a certain interpretation sending every elementary atom to a Boolean combination of 
£i-predicates. Let now * be the interpretation that sends every atom A of the language 
of Int°~ to A*. Obviously then (9)* = (10)*, so that (9)*. And clearly * does satisfy 
the complexity condition of clause (b) of Theorem 3.1. As (9) is the desequentization 
of (8), we find Lemma 7.1 proven. 

So, the “only” remaining duty within our proof of the main Lemma 7.1 is to prove 
Claim 7.2. The rest of this section is solely devoted to that task. 


7.2 Terminology and notation 

Note that, since each atom of (10) is to be interpreted as an elementary game, the 
structure (Lr component) of the game (10)* does not depend on the selection of an 
interpretation *. This nice property of elementary-base formulas was one of our rea¬ 
sons for choosing to deal with (10) instead of (9). In many contexts, it allows us to 
terminologically treat (10) as if it was a game, even though, strictly speaking, it is just 
a formula, and becomes a game only after an interpretation is applied to it. Namely, 
we can and will unambiguously say “legal run of (10)”, meaning “legal run of (10)* for 
some (= every) interpretation *”. 

We will often need to differentiate between subformulas of (9) or (10) and partic¬ 
ular occurrences of such. It should be remembered that the expressions “Pj”, “Pj ”, 
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“Xj A Yj", etc. are metaexpressions, denoting subformulas of (9) or (10). As it hap¬ 
pens, for different occurrences of subformulas of (9) or (10) we have chosen different 
metaexpressions, so those occurrences can be safely identified with the corresponding 
metaexpressions. To avoid possible notational confusions, we will write “(P 7 J”, 

“[Xj A Yj J”, etc. to indicate that we mean metaexpressions (= particular occur¬ 
rences of subformulas) rather than the formulas for which those expressions stand. So, 
say, when we write A,; = Xj or A,; = Qj, we mean that X, and A j, or A, and Qj , are 
identical as formulas; on the other hand, by writing [AjJ = [Xj\ we will mean that 
the two nretaexpressions “A ” and “Xj” are graphically identical, i.e., that A, and 
Xj stand for the same occurrence of the same subformula of (10), which implies that 
i = j. And, as the expressions “A” and “Q” are graphically different from each other, 
we would never have |_A,;J = [Qj J, no matter what i and j are. 

Consider any particular legal position or run T of (10). Since (10) is the —>- 
combination of games, every move of T has the form l.a or 2.a. Intuitively, l.a 
means the move a made in the antecedent of (10), and 2 .a the move a made in the 
consequent. Correspondingly, we think of T as consisting of two subruns which, using 
the notational conventions of Subsection 4.3 of [10], are denoted by T 1 ' and T 2 ’. We 
will be referring to T 2 - as the T-residual position of [W\, because, intuitively, T 2 - is 
what remains of T after discarding in it everything but the part that constitutes a run 
in the [W J component of (10). Note that we wrote [W\ here. Using just W instead 
could have been ambiguous, for W, as a formula, may (and probably does) have many 
occurrences in (10), while [W\ refers to the occurrence of that formula in the conse¬ 
quent and only there. Also, we said “position” rather than “run”. It is safe to do so 
because T 2 ', which has to be a legal run of the game W = \AxW(x) (for otherwise T 
would not be a legal run of (10)), contains at most one labmove — namely, it is () or 
(T a) for some constant a. 

As for T 1 -, it is a legal run of the negation of the antecedent of (10) rather than the 
antecedent itself. That is so because, as we remember, a game A —> B is defined as 
~^A V B. And this means nothing but that -T 1 - is a legal run of the antecedent of (10). 
So, we will be interested in -T 1 ’ rather than T , because we prefer to see the antecedent 
of (10) as it is, without a negation. The antecedent of (10), in turn, is a A-conjunction, 
and we think of -T 1 ’ as consisting of as many subruns as the number of conjuncts. 
Namely, each such subrun is -T 1 ®' for some i. If here i € (1,..., s}, we call -T 1 ®' the 
T-residual run of [o(A,; A Y —> Zj) J, and if i = s + j, we call -T 1 ®' the T-residual 
run of (o ((o Pj —■ <■ Qj) —> Rj)\. As in the case of [ W\ , such names correspond to the 
intuitive meanings of -T 1 ’®'. For example, where 1 < j < s, -iT 1 ^' can be characterized 
as the part of T that constitutes a run in the |_o(Aj A Yj —> Zj) J component. Such a 
run should be a legal run of the game (represented by) o(A j A Yj —> Zj), for otherwise 
T would not be a legal run of (10). 

Assume ’F is the T-residual run of |_o(A; A Yj —>■ Zj) J. We will be referring to 
the bitstring tree TreX A ^(vj) ^ see Subsection 4.6 of [10]) as the T-residual 
[o{Xj f\Yj A,)J-tree. Intuitively, this is the underlying BT structure of the subrun 
of T that is taking place in the |_o(Aj A Yj —> Zj )J component of (10). Then the 
run T is further thought of as consisting of multiple legal runs of A j A Yj —> Zj, 
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specifically, the run 'I'-™ (again, see Subsection 4.6 of [10]) for each complete branch 
w of the T-residual |_o(Aj A Yj —> Zj) J-tree. Notice that such a 4'-“', as a legal run 
of Xj AYj —> Zj, would be finite, containing at most 3 labmoves. Hence we can refer 
to it as “position” rather than “run”. We call such a position 4>- u ' the T-residual 
position of [Xj A Yj —> Zj\ w . The T-residual |_o((of*,- —> Qj) —> Rj) J-tree and 
the T-residual run of [{oPj —*► Qj) —» Rj\ w (where w is a complete branch of that 
tree) are defined similarly. In this case, for safety, we say run rather than position, 
for the game (represented by) (o Pj —> Qj) —> Rj is not finite-depth because of its 
oPj-component, and hence the corresponding \E'- W may be infinite. 

Assume w is a complete branch of the T-residual \_b(Xj A Yj —> Zj) J-tree, and 0 is 
the T-residual position of [XjAYj —> Zj\ w . Such a 0 is thought of as consisting of two 
subpositions: -i© 1 ' and 0 2 \ We respectively refer to these as the T-residual position 
of [Xj A Yj\ w and the T-residual position of [Zj\ w . In turn, -i© 1, is further seen 
as consisting of two subpositions -i© 11 ' and -i© 12 -, to which we respectively refer as 
the T-residual position of [Xj\ w and the T-residual position of [Yj\ w . Similarly, 
if w is a complete branch of the T-residual |_o ((oT, —> Qj) —> Pj)J-tree and © is 
the T-residual run of |_(o Pj —> Qj) —> Rj\ w , we respectively refer to -i© 1 ',0 2 ',0 11 - 
and -i© 1 - 2 ' as the T-residual runs of [oPj —► Qj\ w , [Rj\ w , [oPj\ w and [Qj\ w , 
respectively (in the cases of [Rj\ w and [Qj\ w we can always say “position” instead of 
“run”, of course). 

Assume w is a complete branch of the T-residual [o((oPj —^ Qj) —> Rj) J-tree, and 
T is the T-residual run of Lo-PjJ™- We call Tree^ j ( T) the T-residual [oPjJ^-tree. 
T is then further seen as consisting of multiple legal positions of Pj, specifically, the 
position Y- u for each complete branch u of the T-residual [aPj\ w -tree. We refer to 
such a position Y~“ as the T-residual position of [Pj\™- 

In the above terminological conventions we have started writing “[A* A T)J U ”’, 
“[Pi JJJ”’, etc. Formally these, just like simply “(A) A TJJ” or “(PJ”, are metaex¬ 
pressions. If, say, we write [AiJ’" = [Xj\ u , we imply that the two components are 
graphically the same, here meaning that i = j and w = u. Note that such metaexpres¬ 
sions would not always be finite. For instance, [A^J^ would be infinite if the bitstring 
w is so; this, however, can only be the case when T is an infinite run. 

What we call the residual molecules of l\ or simply T-molecules, are the fol¬ 
lowing metaexpressions: 

• |WJ; 

• [Xj\ w , \Yj\ w and [_ Zj\ w for each j and each complete branch w of the T-residual 
[i(Aj A Yj -y Zj) J-tree. 

• \Qj\ w and [Rj\ w for each j and each complete branch w of the T-residual 

L °((oPj -> Qj) -> Rj) J-tree. 

• [Pj\u f° r eac h h eac h complete branch w of the T-residual |_o((o-Pj —> Qj) —> 
Rj) J-tree and each complete branch u of the T-residual [oP/J^-tree. 
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We may say just “molecule” instead of ‘T-molecule” when T is fixed in a given 
context or is irrelevant. 

We say that the types of the above 7 sorts of molecules are IT, Xj, Yj, Zj, Qj, 
Rj and Pj, respectively. When irrelevant, the subscript j can be omitted here. We 
differentiate between types and what we call metatypes. The metatype of |_ITJ is the 
metaexpression |_ITJ; the metatype of [Pj J™ is the nretaexpression [Pj\] the metatype 
of [X 0 \ w is the nretaexpression \Xj\, and similarly for \Yj\ w , [Zj\ w LQjJ w , 

As in the case of types, the subscripts j can be omitted here when irrelevant. Notice 
that if two molecules have different types, then they also have different nretatypes, but 
not vice versa: for instance, [Qj\ w and [Rj\ v would always have different metatypes 
(because but their types may be identical, meaning that so are the atoms 

of (9) for the occurrences of which Qj and Rj stand. 

[W J-, [X}-, |YJ- and [QJ-metatype molecules are said to be positive; and \_Z\-, 
[i?J- and [PJ-metatype molecules are said to be negative. When one of two molecules 
Mi, M 2 is positive and the other is negative, we say that Mi and M 2 have opposite 
genders. Mark the fact that, for a T-residual molecule M, the T-residual position of 
M is always () or (T a) for some constant a. Note that here, if M is negative, the move 
a is made by player ± even though it is T-labeled in (T a). 


Let M be a T-molecule of type A e {IT, Xj,Yj,Zj,Qj,Rj,Pj \ 1 < j < s}. We say 
that AT, as a T-molecule (or in T), is: 

• virgin iff the T-residual position of M is empty; in this case we define the content 
of M to be the formula A, i.e. U xA(x); 

• devirginized iff the T-residual position of M is (Ta); in this case we define the 
content of M to be the formula A(a). 

Note that two molecules may have identical contents even if their metatypes (but 
not types!) are different. 

Intuitively, the content of a given T-molecule M is the game to which the corre¬ 
sponding subgame of (10) has evolved as a result of the moves of T made within the 
M component. Here the corresponding (sub)game is what we see in the expression M 
between and “J”. For instance, the game corresponding to [jTj is IT, the game 
corresponding to \_Xj\ w is Xj , and the game corresponding to [Pj J™ is Pj. For [W\ 
(and similarly for other molecules), virginity thus means that the moves of T have not 
affected this component (that is, none of those moves were made within [_T1TJ), so that, 
as a (sub)game, it remains U:rIT(:r); and being devirginized means that the moves of 
T have brought the game VAxW{x) down to IT(a) for some constant a. 

We say that a T-molecule Mi is matchingly devirginized (in T) iff Mi is devir¬ 
ginized and there is another devirginized T-molecule M 2 such that Mi and M 2 have 
opposite genders but identical contents. If Mi is devirginized but not matchingly so, 
then we say that it is non-matchingly devirginized. 

Note that, for a T-residual molecule AT, the content of AT, as well as whether M 
virgin, devirginized or matchingly devirginized, depends on T. That is why, unless T 
is fixed or clear from the context, for safety we should say “the content of AT in T” 
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instead of just “the content of M”, say “M is devirginized in T” or “M, as a T-molecule, 
is devirginized” instead of just “M is devirginized”, etc. The point is that the same 
metaexpression M can be a residual molecule of two different runs. Relevant to our 
interests are only the cases when one run, say Ti, is an initial segment of the other run, 
say T 2 . Assume this is so for the rest of the present paragraph, and assume M is a 
lb-molecule. If M = | [W\, M will also be a r 2 -molecule. It is possible, however, that 
M is virgin in Id while devirginized in T 2 ; and if so, the content of M in Id will be 
different from that in T 2 . And it is also generally possible that M is non-matchingly 
devirginized in Ti while matchingly devirginized in T 2 . Similarly when the metatype 
of M is anything other than [W J. However, when M is a non-LITJ-nretatype Ti- 
molecule such as, say, \Xj\ w , then there is no guarantee that M is also a r 2 -molecule. 
For instance, if (r 2 \ and) in position Fi the player T made a replicative move in 

the |_o(Ay A Yj —> Zj) J component of the game which split (i.e. extended to wO and 
ml) the leaf w of the Ti-residual |_A(Aj A Yj —> Zj) J-tree, then w would be just an 
internal node rather than a complete branch of the r 2 -residual [o(Xj AYj —> Zj) J-tree, 
meaning that M = |_J^ is not a residual molecule of T 2 . Instead of [Xj\ w , in the 
general case, T 2 could have many residual molecules of the form , where w A w' . 

Let us agree to say about each such r 2 -molecule [Xj\ w that it descends from [Xj\ w , 
or that \Xj\ w is the Ti-predecessor or simply a predecessor if we do not care 
about details — of [Xj\ w . Similarly for the cases when M is \Yj\ w , [Qj\ w or 

[Rj\ w . And rather similarly for the case M = [Pj]™'- i n this case M will be said to be 
the Ti-predecessor (or just a predecessor) of every r 2 -molecule such that 

w A w' and u A u'\ and, correspondingly, every such [Pj\™i will be said to descend 
from \ Pj\u- Extending this terminology to the remaining case of M = [W \, the latter 
is always its own (single) descendant and predecessor. 

Here comes some more terminology. In the context of a given legal position T of 
(10), where M is a virgin T-molecule, to devirginize M intuitively means to make a 
(legal) move that makes M devirginized; we say that such a move is patient if M is 
the only molecule whose content it modifies. Informally speaking, a patient move for 
a non- \_W\ -metatype molecule M means that the move is made in the corresponding 
leaf (or two nested leaves if M is [PJ-metatype) rather than internal node(s) of the 
corresponding underlying BT(s), for a move in an internal node v would simultaneously 
affect several molecules — all those that are associated with leaves r such that v <r. 
In precise terms, we have: 

• To devirginize [W J means to make the move 2.a for some constant a. This sort 
of a move is automatically patient. 

• To devirginize \Xj\ w (resp. [Yj\ w , resp. [Zj\ w ) means to make the move 
\.j.w'.l.l.a (resp. 1 .j.w 1 .1.2.a, resp. l.j.w'.2.a) for some bitstring w' < w and 
some constant a. Such a move is patient iff w' = w. 

• To devirginize [Qj\ w (resp. LA?J w ) means to make the move l.i.w'A.2.a (resp. 
l.i.w' .2.a) for i = s+j, some bitstring w' Aw and some constant a. Again, such 
a move is patient iff w' = w. 
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• To devirginize \_P :] J[)' means to make the move l.i.w'.1.1. u'.a for i = s + j, some 
bitstrings w' A w and u' A u, and some constant a. Such a move patient iff both 
w' = w and u' = u. 


Notice that player T can only devirginize positive molecules, while player _L can 
only devirginize negative molecules. Every devirginizing move thus has the form a.a for 
some constant a. Let us call such a constant a the choice constant of the devirginizing 
move. Then we say that a given act (move) of devirginization is done diversifyingly 
iff the move is patient, and its choice constant is the smallest constant that has never 
been used before in the play (run) as the choice constant of some devirginizing move. 

7.3 The counterstrategy S 

In this subsection we set up a counterstrategy for (10) in the form of an EPM £, which 
will act in the role of J_ in a play over (10). £ is a universal counterstrategy for (10), in 
the sense that, as will be shown later, no HPM wins (10)* against this particular, one- 
for-all EPM for the yet-to-be-constructed interpretation *. Since £ plays as J_ rather 
than T, we will be interested in the run cospelled rather than spelled by any given 
computation branch of £. That is, in a play, the moves made by £ get the label _!_, and 
the moves made by its adversary get the label T. In our description of £ and the further 
analysis of its behavior, we will be relying on the clean environment assumption. 
According to it, the adversary of a given agent (the adversary of £ specifically) never 
makes illegal moves. As pointed out in [10], such an assumption is perfectly safe and 
legitimate for, if the adversary makes an illegal move, then £ will be the winner no 
matter what happens afterwards, and making £ the winner is the very purpose of our 
construction. From the definition of £ it will be also immediately clear that £ itself 
does not make any illegal moves either. Since all runs that £ generates are thus legal, 
we usually omit the word “legal”, and by a run or position we will always mean a legal 
run or position of (10). 

The work of £ consists in sequentially performing the first two or all three (depend¬ 
ing on how things evolve) of the following procedures FIRST, SECOND and THIRD. 
In the descriptions of these procedures, “current” should be understood as ^-residual, 
where $ is the position of the play at the time when a given step is performed. This 
word may be omitted, and by just saying “molecule” we mean current molecule. Sim¬ 
ilarly, “virgin”, “(matchingly) devirginized”, “devirginize”, etc. should be understood 
in the context of the then-current position. Also, since the current position is always a 
position (finite run), it is safe to say “leaf” instead of “complete branch” when talking 
about bitstring trees in our description of the work of £. 

PROCEDURE FIRST: Diversifyingly devirginize all [-PJ-metatype molecules, 
and go to SECOND. 

PROCEDURE SECOND: If [W\ is matchingly devirginized, go to THIRD. Else 
perform each of the following routines: 

Routine 1. For each j and each leaf w of the current A 1} —► Zj) J-tree, 
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whenever both and are matchingly devirginized and \_Zj\ w is virgin, 

diversifyingly devirginize [ZjJ w . 

Routine 2. For each j and each leaf w of the current |_o ((o-P, —> Qj) —» Rj) J- 
tree, whenever \_Qj] w is matchingly devirginized and \_Rj\ w is virgin, diversifyingly 
devirginize lRj\ w . 

Routine 3. Grant permission, and repeat SECOND. 

PROCEDURE THIRD: Diversifyingly devirginize all [Z]- and [-RJ-nretatype vir¬ 
gin molecules, and go into an infinite loop within a permission state. 

Remember that a fair EPM is one whose every e-computation branch (any valuation 
e) is fair, i.e. permission is granted infinitely many times in each branch. Before we go 
any further, let us make the straightforward observation that 

£ is a fair EPM. (11) 

This is so because THIRD grants permission infinitely many times, and if THIRD is 
never reached by £, then SECOND will be iterated infinitely many times, with each 
iteration granting permission in Routine 3. 

Our ultimate goal is to show that (10) is not valid , which, as mentioned, will 
be achieved by finding an interpretation * such that no HPM wins (10)* against £. 
We approach this goal by first proving the weaker fact that (10) is not uniformly 
valid. In particular, below we are going to show that, for any valuation e and any 
e-computation branch B of £, there is an interpretation t such that the run cospelled 
by B is a T-won run of (10)h As will be observed at the beginning of Subsection 7.6, 
this fact immediately implies the non-uniform-validity of (10). Such a R-depending 
counterinterpretation is going to be what in [8] was called perfect, in our particular 
case meaning that for any predicate letter A of (10), A\x) is a finitary predicate that 
does not depend on any variables except x. This can be easily seen to make Af and 
hence (10)' a constant game, allowing us to safely ignore the valuation parameter e 
in most contexts, which is irrelevant because neither the game e\Af\ nor (notice) the 
work of £ depends on e. To define such an interpretation, it is sufficient to indicate 
what constant atomic formulas are made by it true and what constant atomic formulas 
are made false. Here and later, for simplicity, by “constant atomic formulas” we mean 
formulas of the form A(a), where A is a predicate letter occurring in (10) and a is a 
constant. For obvious reasons, how t interprets any other atoms is irrelevant, and we 
may safely pretend that such atoms simply do not exist in the language. 

So, fix any valuation e spelled on the valuation tape of £, and any e-conrputation 
branch B of £. Let T be the run cospelled by B. Let us agree to say “ultimate” 
(run, position, tree) for “F-residual” (run, position, tree). To T itself we refer as the 
ultimate run of |_(10) J, or simply the ultimate run. By just saying “molecule” 
we mean a residual molecule of T or of any initial segment of it. And T-molecules 
we call ultimate molecules. Any molecule would thus be an ultimate molecule or a 
predecessor of such. When M is an ultimate molecule, by just saying that M is virgin, 
devirginized or matchingly devirginized we mean that M is so in T. 
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We will say that the branch B is short iff, in the process of playing it up, £ never 
entered the THIRD stage, thus forever remaining in SECOND. Otherwise B is long. 
The scope of all this B- and T-dependent terminology extends to the following two 
subsections, throughout which B and T are fixed. 

Our construction of a counterinterpretation for (10) depends on whether B is short 
or long. We consider these two cases separately. 

7.4 Constructing a counterinterpretation when B is short 

Assume B is short. This, looking at the first line of the description of SECOND, means 
that, in the ultimate run of [(10)J (in T, that is), W is not matcliingly devirginized. 
We select our 

counterinterpretation i 

to be the perfect interpretation that makes the contents of all positive non-matchingly 
devirginized ultimate molecules false, and all other constant atomic formulas true. 

Convention 7.3 

• Where A is a predicate letter of (10) and a is any constant, we say that A(a) is 
true iff (a) is true. 

• We say that |_(10)J is true iff the ultimate run of [(10)J is a T-won run of (10)0 

• We say that [W J is true iff the ultimate position of [W\ is a T-won position of 

U'T 

• We say that |_o (Xj A Y,- —> Zj )J is true iff the ultimate run of [o (Xj A Yj —► Zj )J 
is a T-won run of (o(Aj A Yj —y Zj ))* 1 . Similarly for |_o((o-Pi —► Qj ) —► Rj) J. 

• Where w is a complete branch of the ultimate |_o(Aj A Yj —> Zj) J-tree, we say 
that [Zj\ w is true iff the ultimate run (position) of [Zj\ w is a T-won run of Zj. 
Similarly for [Xj\ w , [Yj\ w , [Xj A Yj} w , [Qj\ w , [Rj\ w , [}>Pj -> Qj\ w . 

• Where w is a complete branch of the ultimate |_o((o-Pj —> Qj) —> Zj) J-tree and 

u is a complete branch of the ultimate [oP/J^-tree, we say that is true iff 

the ultimate position of [Pj\u is a T-won position of PJ. 

“False” will mean “not true”. 

Based on the definition of LI, with a moment’s thought we can see that the following 
claim is valid: 

Claim 7.4 Let M be an arbitrary ultimate molecule. 

(i) If M is virgin, then M is false. 

(ii) If M is devirginized, then M is true iff its content is true. 
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Our goal is to show that [(10)J is false. 

Note that [W\ is guaranteed to be false. Indeed, if [W J is virgin, it is false by 
Claim 7.4(i). And, if [W J is devirginized, then, as no switch to THIRD has occured, 
[W\ must be non-matcliingly devirginized. Then, with Claim 7.4(h) in mind, [W\ can 
be seen to be false by our choice of 1. 

As [W\ is false, in order to show that [(10)J is false, it would suffice to verify that, 
for each j, both [A (Xj AYj —> Zj) J and [A((A-P/ —► Qj) —> P,)J are true. Why this 
would suffice can be seen directly from the definitions of A and —>. In turn, based on 
the definition of A, the truth of [A(Aj AY) —> Zj) J and [A((A-Pj —> Qj) —> Pj)J means 
nothing but that: 

(a) for every complete branch w of the ultimate [A(Aj A Yj — » Zj) J-tree, [Xj A Yj — > 
Zj\ w is true, and 

(b) for every complete branch w of the ultimate [A ((A Pj — > Qj) —> Rj) J-tree, 
[(A Pj —> Qj) —> Rj\ w is true. 

Pick any j, and assume w is as in (a). If [Zj\ w is devirginized, then, with Claim 
7.4(h) in mind, it is true. This is so because, by our choice of 1, only the contents 
of positive non-matchingly devirginized (ultimate) molecules are made false by this 
interpretation; [Zj\ w is not positive, nor is its content the same as that of some positive 
non-matchingly devirginized ultimate molecule, for then that molecule would not be 
non-matchingly devirginized. The truth of [Zj] w , in turn, by the definition of —>, 
can be seen to imply the truth of [Xj A Yj —► Zj\ w . Suppose now [Zj\ w is virgin. 
Analyzing how £ acts in Routine 1 of SECOND, the fact that [Zj\ w is not devirginized 
can be seen to indicate that at least one of the two molecules [ Xj\ w and [Yj\ w — let 
us assume it is [Xj\ w — is not matcliingly devirginized. If [Xj\ w is virgin, it is false 
as are all virgin molecules. And if [A,-]™ is non-matchingly devirginized, it is again 
false by our choice of In either case [ Xj\ w is thus false and hence, as can be seen 
from the definition of A, so is [Xj A Yj \ w . This, in turn, by the definition of —>, makes 
[Xj A Yj —> Zj\ w true. Statement (a) is taken care of. 

Assume now w is as in (b). If [Rj\ w is devirginized, then we are done for the 
same reasons as in the previous paragraph when discussing the similar case for [Zj\ w . 
Suppose now [Rj\ w is virgin. Reasoning as we did in the corresponding case of the 
previous paragraph for [AjJ"’ (only appealing to Routine 2 of SECOND instead of 
Routine 1), we find that [Qj\ w is false. Therefore, in order to conclude that [(A-Fj —> 
Qj) — ► Rj\ w is true, it remains to show that [oPj] w is true. The truth of [oPj\ w 
means nothing but that, for every complete branch u of the ultimate [oP/J^-tree, 
[Pj\u is true. But this is indeed so. Consider any complete branch u of the ultimate 
[oPj\ w -tree. [Pj\u is devirginized due to the actions of £ during FIRST. And, as this 
molecule is negative, it can be seen to be true by our choice of t. Statement (b) is thus 
also taken care of. 

So, [(10)J is false, meaning that F is a T-won run of (10)^, i.e. Wn^ 10 ^(r) = _L. 
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7.5 Constructing a counterinterpretation when B is long 

Throughout this subsection, we assume B is long, meaning that [W J is matchingly 
devirginized and thus, at some point of playing B up, £ switched from SECOND to 
THIRD. We let A denote the (finite) initial segment of our ultimate run T consisting 
of all of the (lab)moves made before this switch to THIRD occurred. 

By a supermolecule we mean a devirginized residual molecule M of some subpo¬ 
sition (i.e. a finite initial segment) <f> of T such that for no proper initial segment ’3/ 
of <f> is the Uz-predecessor of M devirginized. We refer to such a $ as the position of 
devirginization of A/, and refer to the length of $ as the time of devirginization of 
M. Next, if here $ is not longer than A, we say that M is an OGSM (Old-Generation 
Super Molecule). Intuitively, OGSMs are molecules that lost their innocence while £ 
was still acting within FIRST or SECOND. Note that [W\ is an OGSM. 

Obviously any devirginized residual molecule M (of T or any of its initial segments) 
descends from some unique supermolecule. We call the supermolecule from which M 
descends the essence of M. Every supernrolecule is thus its own essence. Only de¬ 
virginized molecules have essences. Therefore, if we say “the essence of M” , the claim 
that M is devirginized is automatically implied. Whether a devirginized molecule M 
is a supermolecule or not, by the position of devirginization and time of de¬ 
virginization of M we mean those of the essence of M. Intuitively, the position of 
devirginization of such an M is the position in which M — more precisely, a prede¬ 
cessor of M — first became devirginized, and the time of devirginization tells us how 
soon after the start of the play this happened. Mark the obvious fact that the content 
of any devirginized molecule is the same as that of the essence of that molecule. 

Claim 7.5 No two different negative supermolecules have identical contents. 

Proof. This is so because negative molecules are devirginized by £, which always 
does devirginization in a diversifying way — in a way that ensures that the content of 
the resulting molecule is different from that of any other devirginized molecule. □ 

We define a chain as any nonempty finite sequence (Mi, ..., M m ) of OGSMs such 
that: 

1. Mi and only Mi is [-PJ-metatype. 

2. For each odd k with 1 < k < m, Mf. is negative, Mk+i is positive, and the two 
OGSMs have identical contents. 

3. For each odd k with 3 < k < in, we have: 

• if Mfc = [Zj\ w (some j, w), then Mk -i is the essence of \Xj\ w or the essence 

of : 

• if Mk = [Rj\ w (some j,w), then Mk -1 is the essence of |_ Qj\ w - 

As an aside, observe that, according to the above definition, if [W J is in a chain, 
then it can only be the last element of the chain, and such a chain is of an even 
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length. All internal (neither the first nor the last) odd-numbered elements of a chain 
are \Z J- or [RJ-metatype, and all internal even-numbered elements are [ACJ|_EJ- or 
LQJ-metatype. 

We say that a chain (Mi,..., M m ) is open iff, where [Pj J is the metatype of Mi, 
no element of the chain has the metatype \Qj\ (for the same j). 

For an OGSM M, by Base(M) we denote the set of all atoms Pj of (9) such that 
there is an open chain (Mi,..., M m ) with Mi being Pj-type and M m = M. 

Now remember our assumption that Int 0- does not prove ( 8 ). By the completeness 
with respect to Kripke semantics, this means that there is a tree-like Kripke model 
(W, TZ, ^) such that ( 8 ) is false in the root world root of it. Obviously here we may 
assume that every formula of the antecedent of ( 8 ) is true in root , while W is false. We 
consider this model and its root world root fixed throughout this section. 

Claim 7.6 Suppose M is a negative A-type (A G {Pj,Rj,Zj \ 1 < j < s}) OGSM, 
and p is a world with p ^ Base(M). Then p ^ A. 

Proof. Let M, A, p be as above, and let <F be the position of devirginization of 
M. We proceed by induction on the time of devirginization of M, i.e. the length of <f>. 
There are three cases to consider, depending on the metatype of M. 

Case 1: M is [PJ-metatype. Then Base(M) = {A), and hence this case is trivial. 

Case 2: M is [Z\ -metatype, specifically, M = |_ Zj \ w . As every formula of the 
antecedent of ( 8 ) is true in root, those formulas remain true in all worlds. In particular, 
p^Xj o— {Yj o—Zj). Hence, in order to show that p^Zj, it would be sufficient to 
verify that p^Xj and p^Yj. From an analysis of Routine 1 of SECOND it can be 
seen that the $-molecule \_Xj\ w is matchingly devirginized, for otherwise £ would not 
have devirginized [Zj J w . So, there is a negative $-molecule N with the same content as 
[Xj\ w . The time of devirginization of N is, of course, smaller than that of M, because 
(\Xj\ w and hence) N would have to be already devirginized by the time when M lost 
innocence. Let K be the essence of N. As (N and hence) K has the same content as 
\_Xj \ w , the type of K should be Xj. Now, notice that Base(AT) C Base(M). This is 
so because every open chain (Mi,..., M m ) with M m = K remains an open chain after 
adding to it the essence of \Xj\ w and then M. Hence our assumption p^Base(M) 
implies p^Base(Af). And, since the time of devirginization of (N and hence of) K is 
smaller that of M, the induction hypothesis yields p^Xj. A similar argument shows 
that we also have p ^ Yj. 

Case 3: M is [R\ -metatype, specifically, M = [Rj\ w . We want to show that 
p^Pj o—Qj, from which p^ Rj follows for reasons similar to those pointed out in 
the previous case. For a contradiction, assume p^ Pj o—Qj. Then there is a world q 
accessible from p such that q^Pj and q^Qj. From Routine 2 of SECOND we see 
that the ^-molecule \Qj\ w should be matchingly devirginized (otherwise £ would not 
have devirginized A/). Arguing as we did in Case 2 for \Xj\ w , we find that there is 
a negative OGSM K whose type is Qj and whose time of devirginization is smaller 
than that of M. Every element of Base(AT), except perhaps Pj, can be seen to be also 
an element of Base(M). Therefore, remembering that < 7 ^ Pj, in conjunction with our 
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assumption that p^Base(M) and hence g^Base(M), we find g^Base(iL). This, 
by the induction hypothesis, implies q^Qj, which is a contradiction. □ 

Claim 7.7 [W J is in some open chain. 

Proof. Since B is long, [W J is matchingly devirginized (already) in A. Let N be 
a negative devirginized A-molecule whose content is identical with that of [W J, and 
let M be the essence of N. The type of (N and hence) M, of course, should be W. 
Remember that root^W. Therefore, by Claim 7.6, root ^ Base(M). Consequently, 
Base(M) ^ 0, for otherwise we would vacuously have root^ Base(M). The fact that 
Base(M) is nonempty means that there is an open chain (Mi,..., M m ) with M m = M. 
The result of adding [Wj to that chain obviously remains an open chain. □ 

Let us select and fix some — say, lexicographically the smallest — open chain 
with M m = [W\, and call it the master chain. According to 
Claim 7.7, such a chain exists. Let us call the OGSMs that are in the master chain 
master OGSMs. 

Now we are ready to define the 

counterinterpretation '. 

We define it as the perfect interpretation that makes the content of each master OGSM 
false, and makes all other constant atomic formulas true. 

In what follows, we fully adopt the terminology of Convention 7.3, with the only 
difference that now the underlying interpretation t on which that terminology is based 
is t as defined in the present subsection rather than as defined in Subsection 7.4. As 
in Subsection 7.4, our goal is to show that |_(10)J is false. 

That [W J is false is immediate from our choice of L Hence, in order to show that 
L(10)J is false, it would suffice to verify that, for each j, we have: 

(a) for every complete branch w of the ultimate |_o(^y? AY) —> Zj) J-tree, [Xj A Yj — ■» 
Zj\ w is true, and 

(b) for every complete branch w of the ultimate Lo((o Pj —> Qj) —■ ► Rj) J-tree, 
L(o Pj —> Qj) —> Rj\ w is true. 

Pick any j, and assume w is as in (a). [Zj\ w is devirginized at least due to the 
actions of £ during THIRD (in case it otherwise managed to stay virgin throughout 
SECOND). If the essence of [Zj] w is not in the master chain, then its content is 
true, because the latter, in view of Claim 7.5 and with a little thought, can be seen 
to be different from the content of any master OGSM, and, by our choice of '. this 
interpretation only falsifies the contents of master OGSMs. In turn, from the truth 
of the content of the essence of [Zj\ w and hence the truth of [Zj\ w we infer that 
[Xj A Yj — > Zj] w is true. Suppose now the essence of [Zj] w is in the master chain. 
Then, from the definition of chain and with some thought, we can see that either the 
essence of [Xj\ w or the essence of \Yj\ w should be there, too. Specifically, such a 
molecule would be the one immediately preceeding the essence of [Zj\ w in the master 


30 



chain. Hence, by our choice oft, either \Xj\ w or \Yj\ w is false, which makes [ZjAYj —> 
Zj\ w true. 

Assume now w is as in (b). As was the case with \_Zj J w in the previous paragraph, 
[Rj\ w is devirginized, and, if the essence of \_Rj\ w is not in the master chain, then its 
content and hence |_(o Pj —> Qj ) —>• Rj\ w is true. Suppose now the essence of [Rj\ w is 
in the master chain. Arguing as we did in the previous case for [Xj\ w or |_ Y ? J w , we find 
that the essence of [Qj\ w is a master OGSM and hence [Qj\ w is false. Therefore, in 
order to conclude that |_(o Pj — > Qj) — ► Rj\ w true, it would suffice to show that [oPj\ w 
is true. The truth of Lo-PjJ™ nreans nothing but that, for every complete branch u of 
the ultimate [(Pj \ w -tree, [Pj\™ is true. But this is indeed so. Consider any complete 
branch u of the ultimate [o-PjJ^-tree. \_Pj\™ is devirginized due to the actions during 
FIRST. Its essence cannot be in the master chain because the essence of [Qj\ w is there 
and the master chain is open. But then, in view of Claim 7.5, the content of \_P : j\'f is 
different from that of any master OGSM, which, by our choice of ', makes true. 

Statement (b) is thus also taken care of. 

So, [(lO)J is false, meaning that T is a _L-won run of (10)1, i.e. Wn , 10 ^(T) = _L. 

7.6 From non-uniform-validity to non-validity 

In the previous two subsections we in fact showed that 

(10) is not uniformly valid. (12) 

Indeed, suppose, for a contradiction, that (10) is uniformly valid. Let then 74 be a 
uniform solution for (10) — an HPM that wins (10)* for every interpretation *. Pick 
an arbitrary valuation e (which is irrelevant here anyway), and let B be the (£, e,74)- 
branch. As observed in (11), £ is fair, so the conditions of Lemma 4.1 are met and 
such a branch B is defined. Let then 1 be the interpretation constructed from B as in 
Subsection 7.4 or 7.5, depending on whether B is short or long. Then, as we showed 
in those two subsections, the run P cospelled by I? is a T-lost run of (10)1 (= e[(10)l], 
because the interpretation is perfect). But, by Lemma 4.1, the same T is a run spelled 
by some e-computation branch of 74 - specifically, it is the Tt vs. £ run on e. This 

means that 74 does not win (10)1, contrary to our assumption that 74 is a uniform 
solution for ( 10 ). 

In turn, (12) can be eventually rather easily translated into the fact of completeness 
of Int°” with respect to uniform validity. 

Our goal, however, is to show the completeness of Int° _ with respect to validity 
rather than just uniform validity — the goal which, as we remember, has been re¬ 
duced to showing the non-validity of (10). The fact of non-validity of (10), of course, 
is stronger than the fact of its non-uniform-validity. The point is that the counter¬ 
interpretation 1 constructed in Subsections 7.4 and 7.5 depends on the computation 
branch B and hence on the HPM 74 that plays against £. That is, different 74s could 
require different Is. In order to show that (10) is not valid, we need to construct a one , 
common-for-all-74 counterinterpretation *, with the property that every HPM 74 loses 
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(10)* against £ for that very interpretation * on some valuation e. Not to worry, we 
can handle that. 

Let us fix the sequence 


H u H 2 , H 3 , ... 

of all HPMs, enumerated according to the lexicographic order of their standardized 
descriptions. Next, we select a variable z different from x and, for each constant c, 
define 

e c 

to be the valuation that sends 2 to c, and (arbitrarily) sends all other variables to 1. 
For each constant c, let 

B c 

be the {£, e c , 7i c )-branch, and let 

r c 

be the run cospelled by B c , i.e. (by Lemma 4.1) the H c vs. £ run on e c . 

Next, for any constant c, let 

tc 


be the interpretation constructed from B c and F c in the way we constructed the inter¬ 
pretation t from B and T in: 


Subsection 7.4 if B c is short; 

Subsection 7.5 if B c is long. 

From the results of Subsections 7.4 and 7.5 we thus have: 

For any constant c, Wn 1101 * (r c ) = _L. (13) 

Consider any atom A(x) of (10). For each particular constant c, the predicate 
i* c (a:) is unary, depending only on x. But if here c is seen as a variable and, as such, 
renamed into z , then the predicate becomes binary, depending on x and z. Let us 
denote such a predicate by A(x,z). That is, we define A(x,z) as the predicate such 
that, for any constants a and c, 

A(a, c) = A^ c {a). 


We now define our ultimate 

counterinterpretation * 

by stipulating that, for any atom A(x) of (10), 9 A*(x) is nothing but the above pred¬ 
icate A(x,z). Note that, unlike * c (any particular constant c), * is not a perfect 
interpretation, for A*(x) depends on the “hidden” variable z. 

9 As noted for t in Subsection 7.3, how * interprets the atoms that are not in (10) is irrelevant and 
not worth bothering at this point. 
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Claim 7.8 For any constant c, (10)* c = e c [(10)*]. 

Proof. Consider any predicate letter A of (10), and any constant c. We claim 
that 

(UxA(x))*° = e c [(UxA(x))*]. (14) 

The above two games can be rewritten as UxA* c (x) and e c [UxA*(x)], respectively. 
e c [UxA*(x)] can be further rewritten as e c [U xA(x,z)\. Thus, in order to verify (14), 
we need to show that 

UxA* c (x) = e c [UxA(x, z)\. (15) 

As noted earlier, U xA$ c (x) is a constant game due to the fact that the interpretation 
is perfect. So, it is its own instance, and Ua ’AF c (x) can be safely written instead of 
e[Uxi* c ( x)] for whatever (irrelevant) valuation e. Of course, the two games of (15) 
have the same legal runs, with every such run being () or (T a) for some constant a. So, 
we only need to verify that the Wn components of those two games are also identical. 
And, of course, considering only legal runs when comparing the two Wn components 
is sufficient. Furthermore, the empty run is a _L-won run of both games. So, we only 
need to focus on legal runs of length 1. Consider any such run (T a). By the definition 
of U, Wn Ulitc(l >(T«) = T iff Wn itc (“){) = T; in turn, Wn 4* (a) () _ -p means 
nothing but that A^ c {a) is true; and, by the definition of A, A* c (a) = A(a,c). Thus, 

Wn Uxit'(x)^ Ta j = T iff A{a,c) is true. (16) 

Next, again by the definition of U, we have 

Wn LJ*AM| To ) = Wnf’ z) (). 

As A(a, z) only depends on 2 and e c sends this variable to c, we also have e c \A(a, z)\ = 
A(a,c). And, of course, Wn'^“ ,c *() = T means nothing but that A(a,c) is true. So, 

Wn U*i(x,z)( Ta ) = T iff A{a,c) is true. 

The above, together with (16), implies 

Wn U litt(l )(Ta) = Wn^ i(l ' z) (Ta), 

thus completing our proof of (15) and hence of (14). 

Now, by induction, (14) extends from formulas of the form U xA(x) to all more 
complex subformulas of (10) including (10) itself, meaning that (10)* c = e c [(10)*]. 
The steps of this induction are straightforward, because each of the operations *, * c 
and e c [.. .] commutes with each of the connectives A, o and —>. □ 

Putting (13) and Claim 7.8 together, we find that, for any constant c, T c is a _L-won 
run of e c [(10)*]. Now, remember that T c is the Tt c vs. £ run on e c , according to Lemma 
4.1 meaning that T c is the run spelled by an e c -computation branch of H c ■ So, every 
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H c loses (10)* on valuation e c , i.e. no H c wins (10)*. But every HPM is TL C for some 
c. Thus, no HPM wins (10)*. In other words, (10) is not valid. 

This almost completes our proof of the main Claim 7.2 and hence our proof of the 
main Lemma 7.1 and hence our proof of the completeness of Int - . What remains 
to verify for the official completion of our proof of Theorem 3.1 for Int 0- is that * 
satisfies the complexity condition of Claim 7.2. Such a verification is given in the 
following subsection. 

7.7 The complexity of the counterinterpretation * 

The counterinterpretation * constructed in the previous subsection interprets each atom 
A(x) of (10) as the binary predicate A{ x, z). With “true in the sense of Subsection 7.4 
(resp. 7.5)” below understood as truth in the sense of the corresponding subsection 
where B c is taken in the role of B (and, accordingly, T c in the role of P) when con¬ 
structing the counterinterpretation 1 from it, the meaning of the proposition A(a,c) 
for any given constants a, c is in fact the disjunction of the following two statements: 

1 . “ B c is short and A{a) is true in the sense of Subsection 7.4”; 

2 . U B C is long and A(a) is true in the sense of Subsection 7.5”. 

Note that arbitrarily long initial segments of B c can be effectively constructed from 
c. This can be done by first constructing the machine Tic from number c, and then 
tracing, step by step, how the play between Ti c and £ evolves on valuation e c according 
to the scenario described in the proof idea for Lemma 4.1. This makes it clear that the 
predicate “ B c is long” (with c here treated as a variable) is of complexity Ei, because it 
says nothing but that there is a computation step in B c at which [W\ gets matchingly 
devirginized. 

Next, U B C is short” is just the negation of “ B c is long”. 

Next, some thought can show “A(a) is true in the sense of Subsection 7.4” (with 
a, together with the hidden c, here treated as a variable) to mean nothing but that 
there is no computation step in B c at which A(a) becomes the content of some positive 
non-matclringly devirginized residual molecule of the then-current position. So this is 
the negation of a Ei-predicate. 

Finally, “A(a) is true in the sense of Subsection 7.5” means that there is a 
lexicographically smallest — open chain C whose last element is [11'J i and A(a) is not 
the content of anything in C. With a little thought we can see that, to find such a 
chain C, it would be sufficient to trace B c only up to the computation step at which 
[W J gets devirginized. So, the complexity of the predicate “A(a) is true in the sense 
of Subsection 7.5” is Ei. 

To summarize, where A(x) is an atom of (10), A(x, z), i.e A*(x), is indeed a Boolean 
combination of Ei-predicates. As for all other elementary atoms, we may make arbi¬ 
trary assumptions — without affecting the incomputability of (10)* — about how 
they are interpreted by *. So, we assume that they, too, are interpreted as Boolean 
combinations of Ei-predicates. 
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8 From o- to 


In this section we prove the remaining completeness part of Theorem 3.1 for Int^. 
The following is an important lemma for our proof: 

Lemma 8.1 Bi-AG —> AG, for any formula G of the language of affine logic. 

Proof. The lemma will be proven by constructing an EPM C such that, for any 
static game G, C \= oG —► AG. This, of course, immediately implies that we also have 
CUbAG —> AG for any formula G. 

Thinking of AG as the infinite conjunction G A G A ..., and thinking of any legal 
play over AG —> AG as consisting of two runs — one in the antecedent and one in 
the consequent, the idea of the work of C, in intuitive terms, is the following. Every 
once in a while, in the antecedent, C makes a replicative move in the leaf 00... 0 of 
the underlying bitstring tree. These are all replicative moves it makes, so that, in the 
eventual run T of AG, all of the strings 1,01,001,0001,... will be leaves of Tree 4 G (T) 
(and the only additional complete branch will be the infinite string of 0s). With each 
such leaf 0 m l, C associates conjunct #m + 1 of AG, and uses the copy-cat strategy 
between that conjunct and the copy of G in leaf 0 m l. There can be some delays here in 
mimicking adversary’s moves, but this is OK as G is static. Such a one-to-one matching 
guarantees that if G is won by the adversary in all leaves of the bitstring tree generated 
in the antecedent, then all conjuncts of AG in the consequent are won by C. In other 
words, if the adversary wins in AG, then C is sure to win in AG. This translates into C 
being the winner in AG —> AG. 

In precise terms, here is the strategy that C follows, with k and $ being variables 
initialized 1 and (), respectively: 

PROCEDURE LOOP: Let w = 0 k ~ 1 (the string of k — 1 zeros). Perform the 
following steps: 

Step 1 . Make the move l.w. . 

Step 2. Where ( 4> 1 )-“’ 1 = (Taq,..., Ta m ) and ($ 2 ) fc - = ..., _L/?„), make 

each of the moves 2.k.a\ , ..., 2 .k.a m , l.wl./3i , ..., l.wl./3 n . 

Step 3. Grant permission. If the adversary responds by a move 7 , then: 

(i) if 7 = 2 .j.S for some 1 < j < k, then make the move 1 .u.S, where u = 0 J-1 1 ; 

(ii) if 7 = l.v.8 for some bitstring v, then, for each j with 1 < j < k such that 
v A 0 - 7 ” 1 1, make the move 2.j.S . 

Step 4. Increment k by one, update $ to the current position of the play, and 
repeat LOOP. 

Some additional informal explanations would help. In Step 1, C replicates leaf 0 fc_1 
of (the underlying BT-structure of) the antecedent, thus creating two new leaves 0 fc 
and 0 fc- 1 l. 0 fc is just reserved for further replications, and otherwise C does not care 
about it. As for 0 fc_ 1 l, it is “final” in that it will never be replicated in the future, thus 
forever remaining a leaf. To this leaf corresponds the fcth conjunct of the consequent, 


35 



in the sense that throughout the rest of the play, C will try, mimicking the adversary’s 
moves, to keep the run of G in the fcth conjunct of the consequent identical with the 
run of G in leaf 0 fc-1 l of the antecedent. Before this leaf was created, however, the 
adversary might have already made some moves (3 \,..., (3 n in the kth conjunct of the 
consequent, as well as some moves whose effect was making moves ai,, a m in the 
(then-future) leaf w 1 of the antecedent. C itself has not made any moves in those 
components during the previous iterations of LOOP, as at that time it did not treat k 
as “active”. Following the motto better late than never , during Step 2, C tries to catch 
up by copying the adversary’s moves made in the kth conjunct of the consequent in the 
corresponding leaf 0 fc-1 l of the antecedent, and vice versa. This does not guarantee 
that the corresponding two runs of G will be fully identical, but it does guarantee that, 
at least, one will be a T-delay of the other, and this is just as good as if they were 
identical. During Step 3, for the sake of fairness, C lets the adversary make a move and, 
as long as such a move is a move in an “already activated” (i.e. < kth) conjunct of the 
consequent, or (the effect of the move is) in some already existing final leaves of the 
antecedent, the machine copies that move in the corresponding leaf of the antecedent 
or the corresponding conjuncts of the consequent. 

In trying to verify that the above strategy is successful, as always, we may rely 
on the clean environment assumption, ruling out the possibility that the adversary 
ever makes illegal moves. It is not hard to see that then the machine does not make 
illegal moves either, so that we can narrow our attention down to legal runs only. 
Consider the run F spelled by an arbitrary e-computation branch (whatever valuation 
e) of C. Since LOOP is iterated infinitely many times and permission is granted once 
in each iteration, such a branch is fair. So, we just need to show that F is a T- 
won run of e[oG —> AG] = oe[G] —> Ae[G]. For convenience, we may assume here 
that G is a constant game so that e[G] = G, or otherwise just rename e[G] into G. 
Thus, what we want to show is that Wn sG ^ iG (r) = T, which can be rephrased as 
W n LG v AG|r) = T. As we agreed a while ago, here we can and do assume that T is a 
legal run of oG —> AG. 

If Wn^ G (r 2 j = T, we are done. Suppose now Wn AG (r 2 ) = _L. This means that, 
for some i (i > 1), F 2 '* is a _L-won run of G. Hence -T 2 -* is a T-won run of -iG. Now, 
a little analysis of LOOP can convince us that, where w = 0 i_1 l, (r 1 )- 1 " is a T-delay 
of -nr 2 *. Therefore, as we deal with a static game, (r 1 )- -1 ", too, is a T-won run of -iG. 
This implies that Wn^ G (r L ) = T. Hence Wn f ” Gv,l ' G (r) = T. Done. □ 

In Sections 5 and 6 we defined the notions of standardization and desequentization 
for formulas and sequents of the language of Int . The same concepts straightfor¬ 
wardly extend to Int ^-formulas and Int^-sequents, with just o— replaced by >- and 
o by A in the definitions. 

Lemma 8.2 Assume K is an Int ^ -formula, and D is the desequentization of the 
standardization of K. Then, for any interpretation * with ]= K*, we have |= D*. 

Proof. This is an exact copy of Lemma 6.1, only with Int^ instead of Int^. 
Our proof of Lemma 6.1 relied on the fact that computability is closed under the rule 
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“ from A to A A" . The same closure principle holds with A instead of A, as known from 
(the same) Section 13 of [10]. Everything else in the proof of Lemma 6.1 exclusively 
relied on the soundness of affine logic and certain syntactic facts about affine logic 
and implicative intuitionistic logic. But neither logic does syntactically discriminate 
between a- and >—, or between A and A. This means that our proof of Lemma 6.1 
goes through for the present Lemma 8.2 virtually without any changes except just 
replacing o by A and a- by >- everywhere in the text of the proof. □ 

Now consider any Int'^-formula which is not provable in Int^. Let us denote it 
by K . Let K be the same formula, only with every occurrence of >- replaced by 
o— . Next, let S °~ and S be the standardizations of K °~ and K 5_ , respectively. 
We may assume that the formula (9) from the previous section is the desequentization 
of S °~ , and hence the following formula is the desequentization of S ^: 

k(X 1 AY 1 ^Z 1 ) A ••• A k(X a AY s ->Z s ) A 
A((APi -> Qi) -> i?i) A • • • A A((AP S -> Q s ) -> R s ) ( ’ 

The fact that Int 5 " I / PT 3 4 5- , of course, implies Int 0- 1/ K°~. This, in turn, by 
Lemma 5.2, implies Int 0 " I -f S°~. Therefore, by Lemma 7.1, there is an interpretation 
* satisfying the complexity condition of clause (b) of Theorem 3.1 such that |A= (9)*. 
Note that (17) can be obtained from (9) through repeatedly — 3s times — replacing a 
negative occurrence of a subformula oG by AG. Lemmas 2.1(b) and 8.1 then guarantee 
that HI—(17) —> (9), which implies |= (17)* —> (9)*. From here we infer that, if |= (17)*, 
then |= (9)*, because modus ponens preserves computability. But (A (9)*, and thus 
[A (17)*. Therefore, by Lemma 8.2, [A (pf > ')*. Our completeness proof for Int^ is 
hereby complete, and the main Theorem 3.1 of this paper is now fully proven. 
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